Job Description :

A DevSecOps Staff Engineer integrates security into DevOps practices, designing secure CI/CD pipelines, building and automating secure cloud infrastructure and ensuring compliance across development, operations, and security teams.

Responsibilities :

- Design, build and maintain secure CI/CD pipelines utilizing DevSecOps principles and practices to increase automation and reduce human involvement in the process.

- Integrate tools of SAST, DAST, SCA, etc. within pipelines to enable automated application building, testing, securing and deployment.

- Implement security controls for cloud platforms (AWS, GCP), including IAM, container security (EKS/ECS), and data encryption for services like S3 or BigQuery, etc.

- Automate vulnerability scanning, monitoring, and compliance processes by collaborating with DevOps and Development teams to minimize risks in deployment pipelines.

- Suggesting architecture improvements, recommending process improvements.

- Review cloud deployment architectures and implement required security controls.

- Mentor other engineers on security practices and processes.

Requirements :

- Bachelor's degree, preferably in CS or a related field, or equivalent experience.

- 10+ years of overall industry experience with AWS Certified Security Specialist.

- Must have implementation experience using security tools and processes related to SAST, DAST and Pen Testing.

- AWS-specific : 5+ years experience with using a broad range of AWS technologies (e. EC2, RDS, ELB, S3, VPC, CloudWatch) to develop and maintain an Amazon AWS based cloud solution, with an emphasis on best practice cloud security.

- Experienced with CI/CD tool chain (GitHub Actions, Packages, Jenkins, etc.

- Passionate about solving security challenges and being informed of available and emerging security threats and various security technologies.

- Must be familiar with the OWASP Top 10 Security Risks and Controls.

- Good skills in at least one or more scripting languages : Python, Bash.

- Good knowledge in Kubernetes, Docker Swarm or other cluster management software.

- Willing to work in shifts as required.

Good to Have :

- AWS Certified DevOps Engineer.

- Observability : Experience with system monitoring tools (e. CloudWatch, New Relic, etc.

- Experience with Terraform/Ansible/Chef/Puppet.

- Operating Systems : Windows and Linux system administration.

Perks :

- Day off on the 3rd Friday of every month (one long weekend each month).

- Monthly Wellness Reimbursement Program to promote health well-being.

- Monthly Office Commutation Reimbursement Program.

- Paid paternity and maternity leaves.

Qualifications :

- Any full time degree.